$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa File: 20065a80-fc1c-313d-bc55-ba7100fda1b9.roa (raw, json) Hash identifier: aV2P1tGcIdd+6/JwA1sJASGtICosiKZFtJWTnWU2BgA= Subject key identifier: 2E:77:70:69:C7:F8:83:2C:38:74:F0:AE:CE:5C:B4:8D:C8:57:9E:23 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285849C0A4D729FC02E13A7CDFC850 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 4005 IP address blocks: 204.59.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d7:29:fc:02:e1:3a:7c:df:c8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=607a2c27-a0b4-4f49-88f4-b6b45c184440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:27:04:e5:38:34:5b:79:41:26:24:24:67: 0a:28:70:fe:2a:02:3b:5e:d9:14:54:9c:09:80:4f: be:73:89:62:45:91:a3:db:42:7b:c9:21:20:ec:d6: fb:76:6e:75:b3:61:dc:d8:77:26:d1:4b:08:95:60: 36:96:c4:c7:23:5e:c0:06:30:fe:eb:cb:98:1f:3c: 39:94:04:ec:0f:3c:57:5e:8f:56:08:b8:43:6d:ab: ab:36:30:06:0b:a3:3a:92:f0:cc:11:00:8e:07:dc: 22:04:c6:c5:24:e3:1f:5f:d5:64:51:d8:ad:ee:7d: 0b:a6:3e:73:5e:59:5a:ce:9e:00:c6:96:01:45:e9: 4f:df:64:76:8c:51:c1:c8:47:f1:d5:b4:a3:cc:98: cc:3d:41:75:e1:77:c2:ff:2b:9a:b9:e6:4a:73:39: 8b:8c:25:12:4b:1c:c4:68:46:7e:6e:3d:7f:c8:f5: 55:2e:e0:6b:fb:b7:a9:21:f2:29:5b:17:7b:eb:c6: 97:2a:e8:53:f0:62:d0:f5:ad:5a:66:d4:17:fc:15: 4f:33:24:a8:96:99:2e:54:e8:56:bd:1a:99:16:c8: eb:8f:76:e5:a4:e9:67:04:7a:c6:58:2e:86:97:50: d1:06:e3:f4:7d:84:7d:63:bd:d7:f6:55:9e:f5:1e: 27:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:77:70:69:C7:F8:83:2C:38:74:F0:AE:CE:5C:B4:8D:C8:57:9E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 204.59.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a7:65:f2:c5:77:03:28:20:65:ab:41:63:00:84:13:f4:9a: b0:9c:7b:f5:22:95:78:69:a9:6e:ee:87:d2:4e:70:7f:3d:2a: 66:53:92:0a:6c:c1:dc:52:22:94:cf:03:8e:26:df:8c:7e:0c: 43:c4:31:0d:6a:0d:51:ba:01:ff:17:91:58:8e:f1:9d:93:2a: 8e:fc:aa:97:86:c5:c2:6e:3c:e8:e1:80:db:93:f5:50:b6:33: a3:4f:ea:37:d0:d3:3b:a5:9e:28:39:24:cc:42:8c:b9:c0:9b: 6c:df:80:67:40:97:95:7e:ed:24:8d:93:ed:d8:80:1e:1b:20: 60:2d:26:93:85:aa:79:99:32:ed:5c:33:87:8d:e5:f6:7e:20: 16:66:87:2b:53:d9:75:83:3d:37:02:db:3a:c4:d0:74:a8:a4: d0:51:2e:52:4f:ab:ca:1e:68:77:cc:70:4b:8a:44:40:86:1d: f5:72:90:fa:d6:d8:dc:6f:5c:5a:9a:dc:86:e0:a3:7a:b8:14: e1:9f:88:24:15:14:ca:4a:ff:43:52:f5:95:eb:ab:8c:58:9e: f9:1c:50:fe:60:ce:84:ed:4e:d9:70:48:33:85:fd:b3:3b:ee: 17:d3:91:c3:2b:39:72:b1:59:c1:3d:b5:b7:ba:f2:75:fe:84: 97:46:85:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApNcp/ALhOnzfyFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NjA3YTJjMjctYTBiNC00ZjQ5LTg4ZjQtYjZiNDVjMTg0NDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIcnBOU4NFt5QSYkJGcKKHD+KgI7XtkUVJwJ gE++c4liRZGj20J7ySEg7Nb7dm51s2Hc2Hcm0UsIlWA2lsTHI17ABjD+68uYHzw5 lATsDzxXXo9WCLhDbaurNjAGC6M6kvDMEQCOB9wiBMbFJOMfX9VkUdit7n0Lpj5z Xllazp4AxpYBRelP32R2jFHByEfx1bSjzJjMPUF14XfC/yuaueZKczmLjCUSSxzE aEZ+bj1/yPVVLuBr+7epIfIpWxd768aXKuhT8GLQ9a1aZtQX/BVPMySolpkuVOhW vRqZFsjrj3blpOlnBHrGWC6Gl1DRBuP0fYR9Y73X9lWe9R4ncwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC53cGnH+IMsOHTwrs5ctI3IV54jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMjAwNjVhODAtZmMxYy0z MTNkLWJjNTUtYmE3MTAwZmRhMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWnZfLFdwMoIGWrQWMAhBP0mrCce/UilXhpqW7uh9JOcH89KmZTkgps wdxSIpTPA44m34x+DEPEMQ1qDVG6Af8XkViO8Z2TKo78qpeGxcJuPOjhgNuT9VC2 M6NP6jfQ0zulnig5JMxCjLnAm2zfgGdAl5V+7SSNk+3YgB4bIGAtJpOFqnmZMu1c M4eN5fZ+IBZmhytT2XWDPTcC2zrE0HSopNBRLlJPq8oeaHfMcEuKRECGHfVykPrW 2NxvXFqa3Ibgo3q4FOGfiCQVFMpK/0NS9ZXrq4xYnvkcUP5gzoTtTtlwSDOF/bM7 7hfTkcMrOXKxWcE9tbe68nX+hJdGhSk= -----END CERTIFICATE-----Generated at Sun May 11 07:00:22 2025 by rpki-client